CISA 2026-08-25

FURUNO FA-50 Class B AIS Transponder

Machine-generated analysis · WAYSCloud LLM

All versions of the FURUNO FA-50 Class B AIS Transponder are affected by hard-coded credentials and missing authentication for critical functions.

Context

The advisory identifies the FURUNO FA-50 Class B AIS Transponder as the affected product. It states that an attacker with knowledge of the hard-coded credentials and network access could alter device settings or change configurations without authentication. The vendor notes production ended in October 2020 and no software updates will be provided. Users are advised not to connect the device directly to the internet and to keep vessels properly secured.

Operator considerations

Check: Verify which vessels have a FURUNO FA-50 Class B AIS Transponder installed.
Isolate: Ensure the transponder is not directly internet-connected and restrict its network access.
Log: Monitor attempts to access or modify the device’s management screen.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of these vulnerabilities could allow an attacker to alter device settings.

The following versions of FURUNO FA-50 Class B AIS Transponder are affected:

FURUNO FA-50 Class B AIS Transponder vers:all/*

Vendor

Equipment

FURUNO ELECTRIC CO.,LTD.

FURUNO FA-50 Class B AIS Transponder

Use of Hard-coded Credentials, Missing Authentication for Critical Function

Critical Infrastructure Sectors: Transportation Systems

Countries/Areas Deployed: Worldwide

Company Headquarters Location: Japan

An attacker, who knows the credentials and has access to the in-vessel network to which the device is connected to, may operate the settings screen using that credentials to alter the settings of the device.

FURUNO FA-50 Class B AIS Transponder

MitigationFURUNO ELECTRIC CO.,LTD. notes that production of this product ended in October 2020, and software updates will no longer...

Read the full advisory on CISA →